Solva procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Prior to any such transfer, we conduct a Transfer Impact Assessment to evaluate the legal and practical risks associated with the transfer and to determine whether additional safeguards are necessary. Solva periodically reviews these assessments and its transfer mechanisms to ensure ongoing compliance with applicable data protection requirements. Access to EU/EEA and UK personal data from the United States, where it occurs, is limited, exceptional, and undertaken solely for defined support or maintenance purposes, subject to strict access controls, logging, and confidentiality obligations.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ • Where required, the implementation of supplementary technical and organizational measures designed to ensure a level of protection essentially equivalent to that guaranteed under EU data protection law.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Your personal data may be transferred to and processed in countries other than your country of residence, including the United States. In line with our aim to protect your personal data, we will always ensure proportionate safeguards are in place before transfer is conducted. Where personal data originating in the EU, EEA, or the UK is transferred to a recipient outside the aforementioned region(s), we ensure that such transfers are subject to appropriate safeguards in accordance with the GDPR and EU guidelines. This is conducted in reliance on one or more of the following mechanisms, as applicable:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ To exercise these rights, please contact us at the address below and we will act upon it without undue delay. If your request pertains to Customer Data for which we are a Processor, we will forward your request to the relevant Data Controller (our customer). If your request is related to an insurance claim, please contact your Insurance Company.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. For Customer Data, we will retain the data for the duration of our contract with you and, as stated in our Terms of Service, will delete it within 60 days of the contract's termination, unless you instruct us otherwise or as required by law. User Account Data is retained for as long as your account is active and for a reasonable period thereafter for operational or legal purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “• The right to erase your data (“right to be forgotten”).” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ • Business Transfers: If Solva is involved in a merger, acquisition, or sale of all or a portion of its assets, your data may be transferred as part of that transaction, subject to standard confidentiality agreements. If such an occurrence is realized, you will be informed.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ • Service Providers: We share data with trusted third-party vendors who act as sub-processors to help us operate the Services. These providers, who can be found in Solva’s Security Center, are bound by strict confidentiality and data protection terms. Prior to sharing any data with our Service Providers, we always conduct a Data Protection Impact Assessment to proportionally and properly assess and mitigate any risks associated with the data processing.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ These Terms apply to website visitors and trial users. If you or the entity you represent have entered into a Master Service Agreement (MSA) and Order Form with Solva, the terms of that written MSA shall prevail over these Terms in the event of any conflict.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.